Mismatch noticed in Chinese-language spam:

Content-Type: application/vnd.ms-excel;
        name=nfy.xls
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
        filename=vmdgjctvi.xls

I wonder whether name= and filename= being different are diagnostic of fakery or are just something one can expect in mail from normal software. I never paid attention. Before I figure how to parse them out and log them to check-- has
anyone gone down this path already?


Joseph Brennan
Columbia University Information Technology


_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list [email protected]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang

Reply via email to